Vulnerable WordPress Plugins Report for the Week of May 17, 2019

Vulnerable Plugins

There are nineteen issues this week, with five unfixed. The most critical this week is the Sensitive Information Disclosure, Arbitrary File Deletion, and multiple Cross-Site Scripting vulnerabilities in Ultimate Memberdiscovered by Sucri earlier this week. There was also a Local File Inclusion vulnerability disclosed in Photo Gallery by 10Web that does not appear to be fixed yet (as of the time of this post).